> I'm not sure where to go next, can anyone give me any advice?

Have you contacted the FBI and Europol? A police report is the first thing you need before any company starts taking you seriously about crime being committed on your billing accounts.

https://www.fbi.gov/investigate/cyber

https://www.europol.europa.eu/report-a-crime/report-cybercri...